Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 42: libtpms Important CVE-2026-21444 Security Advisory

fedora
Calendar Grey January 18, 2026
Dist Fedora Esm H88
Upgrade to libtpms 0.10.2 addressing CVE-2026-21444 to enhance security functionality in Fedora 42 systems.
Upgrade to libtpms 0.10.2 fixing CVE-2026-21444

Summary

A library providing TPM functionality for VMs. Targeted for integration

into Qemu.

Update Information:

Upgrade to libtpms 0.10.2 fixing CVE-2026-21444

Topics%20covered

Topics Covered

security advisory fedora important libtpms cve-2026-21444 insecure initialization

Change Log

* Fri Jan 2 2026 Stefan Berger - 0.10.2-1 - Upgrade to libtpms 0.10.2 fixing CVE-2026-21444

References


[ 1 ] Bug #2426838 - CVE-2026-21444 libtpms: return of wrong initialization vector when certain symmetric ciphers are used https://bugzilla.redhat.com/show_bug.cgi?id=2426838

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-14ecf2c0cd' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: libtpms
Product: Fedora 42
Version: 0.10.2
Release: 1.fc42
URL: https://github.com/stefanberger/libtpms
Summary: Library providing Trusted Platform Module (TPM) functionality

Topics%20covered

Topics Covered

security advisory fedora important libtpms cve-2026-21444 insecure initialization

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here